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AMENDMENTS TO THE SPECIFICATION 

Please replace the paragraph beginning at page 4, line 29, with the following 
rewritten paragraph: 

— Referring to FIG. 1, the present invention's includes a process module (41), 
a data storage module (42), a detection result notification module (43), an access blocking 
decision module (44), an access blocking module (45), a search list logging & saving module 
(46), an IP collision decision module (47), an ARP packet filtering module (48), an packet 
capture driver module (49), an communication interface module & communication kernel 
module (50), an network interface driver module (51) and a network interface module (52). — 

Please replace the paragraph beginning at page 6, line 21, with the following 
rewritten paragraph: 

— The above data storage module (42) received information from the search 
list logging and save module (46) and stores the updated IP collision list, and at the same 
time, if the s earch detection result notification module (43) requests the operational 
information received from process module (41), the requested information is transmitted. — 

Please replace the paragraph beginning at page 6, line 26, with the following 
rewritten paragraph: 

— The above IP collision decision module (4547) makes decisions on IP 
collisions based on filtered ARP packets received from ARP packet filtering module (48). 
Depending on access blocking policies defined in per IP 1 MAC IP/MAC address list included 
in the data storage module (42), the access blocking decision module (44) decides whether to 
block or allow the received ARP packet and block the ARP packet using access blocking 
module (45). -- 

Please replace the paragraph beginning at page 7, line 7, with the following 
rewritten paragraph: 

»- Referring to FIG. 2, the collided IP detection and blocking method of the 
present invention is shown in step S61 . the The packet capture driver module (49) captures all 
packets detected in the IP networking environment, transmits them to the ARP packet 
filtering module (48), and only ARP packets are filtered at the filtering module (48) for 
transmission for the data storage module (42). — 
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Please replace the paragraph beginning at page 7, line 24, with the following 
rewritten paragraph: 

— In step S64, based on the ARP packet list filtered through ARP packet 
filtering module (48), it executes the collided IP detection process using IP collision decision 
module (47). In the present invention, when IP/MAC addresses are added to the list, and the 
ARP respond message occurs more than 3 times within the time out period (time out period: 
1 to 2 seconds), it is determined that a host with the same IP address exists in the network. — 

Please replace the paragraph beginning at page 7, line 30, with the following 
rewritten paragraph: 

-- Step S65 executes access blocking tasks, based on the list created in step 
S63, using access blocking module (45). It blocks and controls each host's access by defined 
network access policies. Access control policies can be defined by a group and/or per host 
level. — 
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